28 of 368 left after this
Bulgar DNA
Two hostname holes — both caught by the layer below, both closed
“- **Trailing dot.** `localhost.` is a fully-qualified name resolving identically (verified: `::1` and `127.0.0.1`) and walked past every rule in `url.ts` — the suffix test does not match `.local.`, the IPv4 pattern does not match `127.0.0.1.`. The connect-time check caught it, so this was a hole and”
Claimed by the agent in its own report. Not confirmed by a human.
DRAFTNEEDS REVIEWreport-section
This is the decision that moves the percentage. Your answer is stored as yours and is never overwritten by anything generated.